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DESCRIPTION 

AUTHENTICATION APPARATUS AND AUTHENTICATION METHOD 
USING RANDOM PULSE GENERATOR 

5 

TECHNICAL FIELD 

The present invention relates to an 
authentication apparatus and an authentication method 
using a completely random signal as an authentication ■ 
10 signal from a random pulse generator to generate 
completely random pulses. 

BACKGROUND ART 

In the conventional authentication apparatus 

15 such as an electronic lock, a key manufacturer 

determines an authentication data in advance, and 
completes and sells, as a set, a key body (or a lock) 
and a key to be inserted into the key body. The user 
purchases the complete product and uses by mounting 

20 it on the front door, for example, at a required 

point. In electronic locks of other types, the time 
when the lock has been shut is stored in the key body 
and the key as authentication data, which is collated 
at the time of opening the lock (Japanese Patent 

25 Application Laid-open No. H07-233663), or a 
voiceprint (or a voice pattern) is used as 
authentication data (for example, Japanese Patent 
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Application Laid-open No. H08-257216) . 

DISCLOSURE OF THE INVENTION 

The conventional authentication apparatuses are 
5 discussed below with reference to the electronic lock 
as a specific application. In the conventional 
electronic locks fabricated with authentication data 
predetermined by the manufacturer, the authentication 
data are fixed and cannot be freely changed (actually, 

10 the manufacturer creates the authentication data 
according to a program, and the number of sets 
thereof is limited, so that the same authentication 
data is liable to be used undesirably) , or even if 
changeable, the authentication data is input by ten- 

15 keys or the like and therefore the number of digits 
and the number of sets available are limited. 

In many cases, the manufacturer is required to 
hold the authentication data of the products for 
maintenance and services necessitates a vast amount 

20 to secure confidentiality. When the key sets are 
limited, for example, the' chance of the same 
authentication data being used increases. The 
manufacturer, therefore, is required to manage the 
keys by taking care not to distribute the same key 

25 sets in the same area. Further, the prevention of 
data leakage unavoidably depends on the quality of 
the manager, and therefore the preventive measures 



WO 2005/083643 



PCT/JP2005/002963 



cannot be complete and limited* 

Incidentally, when a plurality of the same 
authentication data are used, the use of an 
electronic lock, for example, in an automotive 
5 vehicle may also inconveniently open the door of 
another vehicle which may be parked in the same 
parking lot. 

Assume, on the other hand, that the locked time 
is used as authentication data. In view of the fact 

10 that time is data changing regularly with time, 
however, the locked time is not proper as 
authentication data requiring irregularities. The 
data may be easily decoded from the number of digits 
thereof, or a copy key can be easily fabricated by 

15 simultaneous use, thereby inconveniently posing the 
security problem. 

The authentication data using the voiceprint, 
on the other hand, requires a complicated device to 
identify the voiceprint and therefore is not suitable 

20 as a generally applicable electronic lock. 

Both time and the voiceprint depend on the 
external environments (namely an authentication 
signal completely free of environmental factors 
cannot be generated in the key or the key. body) . The 

25 key system, therefore, can be unlocked by the 
artificial operation of a person having full 
knowledge of the mechanism thereof, and has a limit 
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in security. 

This invention has been achieved to obviate the 
problems of the conventional authentication 
apparatuses, or especially the electronic lock 
5 described above, and an object thereof is to provide 
an authentication apparatus comprising a body, a 
partner side paired with the body, in which there are 
compared with a random pulse generator (hereinafter 
referred to as the RPG) , arranged in the body or the 

10 partner side or in both the body and the partner side, 
which generates random pulses, a means which outputs 
authentication data based on the random pulses 
generated by the RPG, a means which stores ■ 
authentication data, a communication means which 

15 transmits/receives authentication data, and a control 
means which controls the communication of 
authentication data and collates authentication data. 

Another object of the invention is to provide 
an authentication method comprising the steps of: 

20 generating random pulses by a random pulse generator 
(hereinafter referred to as the RPG) arranged in a 
body or a partner side paired with the body or in 
both in the body and the partner side; outputting 
authentication data based on the random pulses 

25 generated by the RPG; storing authentication data; 
transmitting/receiving authentication data; and 
controlling the communication of authentication data 
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and collating authentication data. 

In the authentication apparatus and the 
authentication method according to this invention, a 
RPG utilizing the a particles infinitely released by 
5 the natural collapse, for example, is incorporated in 
the key body, and an original, random signal 
completely free of the effects of the environmental 
conditions and never controllable artificially is 
obtained from the RPG. This signal is used as an 

10 authentication signal of a key. Therefore, the 

authentication signal can be generated any time in 
the key, and a new, completely random data can be . 
written each time of use. It is impossible to copy 
it, and therefore the data management by the key 

15 manufacturer is eliminated. In this way, the 

security of the user is fully maintained and safety 
established. 

BRIEF DESCRIPTION OF THE DRAWINGS 
2 0 Fig. 1A is a diagram for explaining a key 

authentication apparatus using a random pulse * 
generator (RPG) according to an embodiment of the 
invention . 

Fig. IB is a diagram for explaining the manner 
25 in which the authentication apparatus shown in Fig. 
1A is used. 

Fig. 2 is a block diagram showing a random 
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pulse generator used in an embodiment of the 
invention . 

Fig. 3 is a front view showing a diode with an 
a radiator used with the random pulse generator 
5 according to the invention. 

Fig. 4 is a perspective view of a zener diode 
used with the random pulse generator according to the 
invention. 

Fig. 5 is a graph showing an example of an 
10 output waveform of the random pulse generator 
according to the invention. 

Fig. 6 is a block diagram showing an example of 
the circuit of the key body according to the 
invention . 

15 Fig. 7 is a block diagram showing an example of 

the circuit of the key according to the invention. 

Fig. 8 is a flowchart showing the communication 
procedures between a key body and a key paired with 
the key body according to the invention. 
20 Fig. 9 is a diagram for explaining a method of 

displaying by classification of the output pulses of " 
the random pulse generator according to the invention. 

Fig. 10 is a block diagram showing an example 
of the configuration of a RPG module according to the 
25 invention. 

Fig. 11 is a diagram for explaining the 
configuration of the random pulse generator using RF. 
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BEST MODE FOR CARRYING OUT THE INVENTION 

An authentication apparatus and method using a 
random pulse generator (RPG) according to the 
invention are explained in detail below with 
5 reference to an electronic lock as an embodiment. 

Fig. 1A is a diagram for briefly explaining an 
electronic lock according to this invention, and Fig. 
IB is a diagram for explaining the manner in which 
the electronic lock shown in Fig. 1A is used. In the 

10 drawings, the reference numeral 1 denotes a door knob, 
the reference numeral 2 denotes a fingerprint 
authentication apparatus, the reference numeral 3 
denotes a ten-key unit, the reference numeral 10 
denotes an electronic lock body, the reference 

15 numeral 11 denotes a random pulse generator 

(hereinafter referred to as the RPG) built in the 
electronic lock body, the reference numeral 12 
denotes a memory built in the electronic lock body, 
the reference numeral 20 denotes a key, and the 

2 0 reference numeral 21 denotes a memory built in the 
key. 

The RPG used for generating completely random 
pulses is constituted of an a particle detector 
described in, for example, Japanese Patent No. 
25 2926539 granted to the present inventor. The a 

particle radiator used in this case is 241 Am, 244 Crn, 
210 Pb- 210 Po, 210 p O/r or the like which naturally 
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collapses. In the case of the electronic lock used 
for the part having a shield space such as a safety 
box, the RPG for generating random pulses using the 
beta ray or the gamma ray may be used. 
5 The a particles, the beta ray and the gamma ray 

are not affected by the environmental factors such as. 
temperature, pressure, humidity or electromagnetic 
wave, and therefore cannot be controlled artificially. 
This property is an important factor to secure safety 

10 which cannot be realized by other methods. For the 
electronic lock used for the part not requiring a 
complete safety, on the other hand, thermal electrons 
or semiconductor jitters may be used as a source of 
random pulses. 

15 The key body has built therein a RPG, an 

electronic circuit for making it possible to use the 
random pulses sent out from the RPG as an 
authentication signal, a circuit (storage element) 
for storing the authentication signal, a circuit for 

20 transmitting and receiving the authentication signal 
in accordance with the communication mode and, if 
necessary, an antenna, a communication device, a 
power supply, etc. Incidentally, power may 
alternatively be supplied from an external source by 

25 communication (electromagnetic induction, radio wave 
or terminal connection) . 

First, a random pulse generator (RPG) 11 for 
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generating random pulses voluntarily is explained. 

The RPG, as shown in Fig. 2, includes a pulse 
generating unit 11A, a pre-amplif ier 11B, a main 
amplifier 11C and a waveform shaping unit 11D. 
5 The pulse generating unit 11A is. configured of 

a device selected in accordance with the safety 
required of the key (electronic lock) . For the key 
requiring the highest safety, a device (diode with . 
the a particle radiator) having an a particle 

10 radiator shown in Fig. 3 is used. In the drawing, 

the reference numeral lib denotes a can seal. The a 
particles (He atoms) are released from the a radiator 
semipermanently and voluntarily in accordance with 
the half life period thereof . without any power supply 

15 in a manner completely free of the effects of the 

environmental factors such as temperature, pressure 
or electromagnetic wave. Specifically, this method 
has the feature that the original signal used for 
authentication is produced from a signal source 

20 totally incapable of human control. This signal 

source, therefore, can never be changed from outside. 
Incidentally, the use of a radioactive capsule is 
disclosed in Japanese Patent No. 2926539 described 
above . 

25 When the key mounting portion does not always 

require complete safety, the pulse generating unit 
may be configured of a diode (zener diode) as shown 
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in Fig. 4. 

In the pre-amplif ier 11B, a minute pulse signal 
generated by the pulse generating unit 11A is 
amplified as an input signal of the main amplifier 
5 11C. 

The main amplifier 11C amplifies a signal to 
discriminate the signal clearly from noises. In this 
circuit, the voltage of 0.5 or lower containing 
noises is processed separately as a band containing a 

10 noise signal. The voltage processed as a discrete 

level is S et in accordance, with the signal strength 
and noise level required (Fig. 5) . 

In the waveform shaping unit 11D, a pulse width 
is added to the pulse output as a leading waveform 

15 from the main amplifier 11C so that it can be handled 
as an authentication signal. The pulse waveform 
output from the RPG is shown in Fig. 5. 

Incidentally, the random pulse of the RPG has a 
height (or crest) value and pulse interval which are 

20 both random, as shown in Fig. 9. Therefore, the 

voltage of the height value can be converted into a 
digital random value, and since the number of clock 
pulses to measure the pulse interval can also be used 
as a random value. Also, as shown in the same 

25 drawing, a combination of voltage and number of clock 
pulses may be used. For example, a pulse 1 is given 
as (9, 5), a pulse 2 is given as (4, 3), a pulse 3 is 
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given as (7, 6) and a pulse 4 is given as (10, 3) . 

The circuit of the key body is shown in Fig. 6. 
The key body 10 is configured of a power supply 
module 13, an insertion detection module 14, a 
5 transceiver module 15 and a RPG module 16. 

The power supply module 13 supplies an 
operation power to the constituent circuits as a 
whole, and according to the embodiment shown in the 
drawing, includes a DC-DC converter Ul for supplying 
10 a stabilized voltage of 5 V. 

The insertion detection module 14 detects the 
insertion of the key constituting the partner side by, 
for example, the contact between the key body and the 
key (switch SW2 on) , and sends a start signal to the 
15 RPG module through a buffer gate U7 . 

The transceiver module 15 transmits and 
receives a signal by infrared light communication to 
and" from the key inserted. The reference character 
U2 denotes an infrared light communication module, 
2 0 and the one used in the shown embodiment is a package 
of an infrared light emitting LED, a photodiode and a 
waveform shaping LSI. The reference character U3A 
denotes a monostable multivibrator which is supplied 
with the output pulse signal of the infrared light 
25 communication module as a trigger signal and sends an 
output pulse signal to the RPG module U6. 
Incidentally, the reference character U4 denotes an 
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AND circuit and U5 denotes an inverter circuit to 
prevent the interference of the signals transmitted 
to and received from the infrared light communication 
module. The transceiver module may use a radio 
5 communication with light or radio wave other than the 
infrared light communication. 

In the shown embodiment, the transmitting and 
receiving of the authentication data using the 
transceiver module is illustrated. Nevertheless, 

10 this invention is not limited to such means, but may 
use a circuit connection by contact as communication 
means (means for transmitting and receiving the 
authentication signal) . 

The RPG module 16, which executes the 

15 communication procedures, sends out a signal, 

receives a signal and stores the data, has built 
therein a RPG providing a signal source. The RPG 
module also outputs an unlocking output to open the 
electronic lock when it is determined that the 

2 0 authentication data of the key body and the key are 
identical with each other. To open the electronic 
lock, well known means is used. In the case of an 
electromagnetic lock mechanism, for example, a 
control signal is sent to a control means to give an 

25 unlock instruction. The communication procedures 

between the key body and the key are described later. 
Fig. 10 shows an example of configuration of 
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the RPG module. This module is configured of a 
random pulse generator 16A, an A/D converting circuit 
16B, a reference voltage generating circuit 16C, a 
clock pulse generating circuit 16D, a pulse counter 
5 16E, an input/output terminal ( input /output circuit) 
16F, an arithmetic operation circuit (arithmetic 
operation, processing and control circuit) 16G, a 
storage circuit 16H, a display/operation sound output 
circuit 161 and a lock operation output circuit 16J. 

10 The arithmetic operation circuit 16G determines 
whether the authentication signal input from the 
input/output terminal 16F is identical with the 
authentication signal stored in the storage circuit 
16. The result of determination is displayed on the 

15 display/operation sound output circuit 161 on the one 
■ hand and notified aurally from an external speaker, 
according to need. In the case of coincidence, an 
unlock output is produced through the lock operation 
output circuit. 

20 The interval of the pulses output from the 

random pulse generator 16A is random, and therefore, 
the pulse interval is calculated using the clock 
pulse generating circuit 16D and the pulse counter 
16E. The number of clock pulses thus obtained is 

25 used as an authentication signal (authentication 

data) . As an alternative, since the height value and 
the interval of the pulses output from the random 
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pulse generator 16A are random, the voltage of the 
height value is digitally converted using the A/D 
converting circuit 16B and the reference voltage 
generation circuit 16C, and the resulting digital 
5 signal is used as an authentication signal 

(authentication data) . The embodiment shown in the 
drawing is so configured that the authentication 
signal can be obtained by any one or both of the 
methods described above. Nevertheless, only one of 

10 the configurations may be employed. 

In registering a key, the authentication data 
obtained by the means described above is stored in 
the storage circuit 16H, while at the same time being 
sent from the input /output terminal 16F to the 

15 transceiver module 15 of the key body. The 

transceiver module sends the authentication data to 
the key, and stores it in an operation/storage module 
24 through a transceiver module 23 of the key. 
The RPG module 16 is not limited to the 

20 configuration shown in the drawing, but in accordance 
with the security level with which the key body (a 
lock) is mounted, can be replaced with a device 
having a CPU or a PIC that can construct a 
determining circuit or an internal clock. A one-chip 

25 configuration with ASIC is also possible. 

The key inserted into the key body has built 
therein a circuit and a storage element to store the 
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authentication signal, a circuit for transmitting and 
receiving the authentication signal corresponding to 
the communication mode, and if required, an antenna, 
a communication device and a power supply . The power 
5 can alternatively be supplied from an external source 
by communication (electromagnetic induction, radio 
wave or terminal connection) . 

The circuit configuration of the key paired 
with the key body is shown in Fig. 7. The key is 

10 configured of a power supply module 22, the 

transceiver module 23 and the operation/storage 
module 24. Incidentally, the key may have a shape 
and configuration like an IC card. 

The power supply module 22 supplies the 

15 operation power to all the component circuits, and in 
the shown embodiment, is configured of a DC-DC 
converter Ul to supply a stabilized voltage of 5 V. 
According to this embodiment, the power module 22 has 
such a configuration as to supply the signal power 

20 with a battery inserted therein. As an alternative, 
a switch may be built in to start communication as 
soon as it is depressed. 

The transceiver module 23 is for transmitting 
and receiving a signal by infrared light 

25 communication with the key body. This configuration 
is similar to that of the transceiver module 15 of 
the key body. The output of the one-shot 
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multivibrator XJ3A, however, is sent to the 
asynchronous receiving port of the operation/storage 
module 24. 

The operation/storage module 24 is a general- 
5 purpose PIC (peripheral interface controller) and has 
an arithmetic operation unit, a memory and an 
input/output unit. This operation/storage module 24 
stores the authentication data and controls the 
communication between the key body and the key and 
10 the collation procedures of the authentication data. 
The module 2 4 according the embodiment shown in the 
drawing also includes a timer and a general-purpose 
communication port. 

Next, the procedures of authenticating the key 
15 body and the key are started with registering the key 
as a partner side of authentication. In key 
registration, the key is automatically authenticated 
by insertion and can be registered as a partner side. 
In accordance with the safety level of the device and 
20 unit mounted, however, a fingerprint authentication 
device 2 or a ten-keys unit 3 (to input the pass 
word) as shown in Fig. 1A can also be combined. 

To register the key, the key is inserted into 
the body of the electronic lock and a signal is 
25 written in the key from the RPG while at the same 
time being stored in the key body. 

For authentication to open the lock, on the 
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other hand, the authentication data sent from the 
registered key inserted into the key body is compared 
with the authentication data held in the key body. 
Upon coincidence of the authentication data, the lock 
5 is opened. Once the lock is opened, the data thereof 
is deleted while at the same time writing new 
authentication data in both the key body and the key. 
This authentication procedures and the storage of the 
authentication data are repeated each time the key is 
10 used. 

The RPG (random pulse generator) can be so 
configured as to generate a random pulse by receiving 
the RF (radio wave) used in an IC tag, for example. 
Fig. 11 shows a related embodiment. The RF is so 
15 weak that it is affected by the propagation 

conditions (environment, transmitting/ receiving 
distance, or the like) and constitutes a 

substantially random signal from the viewpoint of e.g. 
the height value thereof. In Fig. 11, the RF ((a) of 

20 Fig. 11) transmitted from the key body, the partner 
side or a RF transmitter 30 independent of them is 
received by a RPG 17 of the partner side or the key 
body. The RPG 17, though plotted as a block 
different from the RPG module 16 in the shown 

25 embodiment, may of course be packaged in the RPG 

module 16. According to this embodiment, the RPG 17 
includes a RF receiver 17A for receiving the RF, a RF 
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dividing circuit 17B (the output waveform of which is 
shown in (b) of Fig. 11) for dividing (sampling) the 
RF height value (voltage) by the clock pulse, and an 
A/D converter 17C for producing a random signal by 
5 A/D conversion of the divided height value ( (c) of 
Fig. 11) . The output of the A/D converter 17C is 
transmitted to the pulse counter 16E of the RPG 
module 16 (Fig. 10) . According to this embodiment, 
the divided height value providing an output of the 

10 RF dividing circuit 17B may be directly converted 
into a digital value by the A/D converting circuit 
16B of the RPG module 16, and the resultant numerical 
value may be used. 

In the authentication apparatus or the 

15 authentication method according to this invention, 
the key body or the partner side can include the 
computer, hardware. Also, as a corresponding 
configuration, the RPG may be mounted on the partner 
side or the key body,, and then mounted integrally or 

20 individually to the computer hardware. For example, 
the RPG is mounted on the computer or a peripheral 
device (such as a USB memory) connectable with the 
computer to execute the authentication between the 
computer and the peripheral device using a random 

25 authentication signal. 

The authentication steps according to the 
invention can be programmed. Such an authentication • 
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program can be installed in the body, the partner 
side, or each of them, and it includes, for example, 
a code to generate random pulses from a random pulse 
generator arranged in the body or the partner side 
5 paired with the body, or in both the key body and the 
partner side, a code to output authentication data 
based on the random pulse generated by the RPG, a 
code to store authentication data, a code to 
transmit/receive, authentication data and a code to 

10 control the communication of authentication data and 
collate authentication data. 

Also, the program to control the communication 
of authentication data and collate authentication 
data includes, for example, a code to receive 

15 authentication data stored in a storage means stored 
on the partner side, a code to collate the received 
authentication data with authentication data of a 
storage means arranged in the body, a code to 
authenticate the partner side in accordance with the 

20 collation result, a code to update authentication 

data after completion of authentication and a code to 
write thus updated new authentication data in the 
storage means of the body and the partner side. 

The communication procedures between the key 

25 body and the key constituting the partner side are 
shown in detail in Fig. 8. 

(i) The key body, upon detection of the key insertion 
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by an insertion detection trigger module, sends the 
character key I (inquire) 4- (I command) to the key 
constituting the partner side thereby to request the 
transmission of the collation data. 
5 (ii) The key, upon receipt of the I command from the 
key body, transmits the stored collation data to the 
key body with a character string "Rx...xi" (x...x changes 
with the RPG data) . 

(iii) The key body, upon receipt of the collation 

10 data from the key, compares it with the data held in 
the key body, and upon incoincidence, generates a NG 
sound to end the authentication process* 

(iv) Upon coincidence in (iii) , on the other hand, an 
unlock output from the RPG module is sent to an 

15 appropriate drive control circuit to open the 

electronic lock. At the same time, the RPG module 
updates the authentication data (interval data of 
about 100 jLisec) and transmits it to the key as a new 
authentication data in the command form of Wx...x4<" . 

20 (v) Upon receipt of the W command, the key holds the 
new data for the next collation. 

(vi) In order to check whether the authentication 
data sent by the W command is received rightly by the 
key, the key body transmits the I command again to 

25 the key. 

(vii) In response to the I command, the key returns 
the new authentication data to the key body with the 
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R command . 

(viii) The key body collates the received 
authentication data, and upon coincidence, considers 
the process as a success and generates an OK sound, 
5 (ix) Upon incoincidence in (viii), on the other hand, 
the data is transmitted again to the key as the W 
command. Subsequently, the steps (v) to (viii) are 
repeated several times, and if the process still ends 
in a failure, a fatal error sound is issued thereby 

10 to end the authentication process. 

In the case of the fatal error, the 
authentication data held by the key body and the key 
remain different from each other, and therefore could 
not be used permanently as they are.. To avoid this 

15 inconvenience, according to this invention, the 
process is initialized according to the steps 
described below to forcibly enable both units to hold 
the same data. 

(i) The 20 pins of the RPG module are shorted to GND. 
20 (ii) The key is inserted into a lever switch 

(insertion detection trigger module) . 

(iii) The initialization is successful if the OK 

sound is generated. 

These steps used in this method are 
25 illustrative, and the initialization is possible also 

by another process. In any way, it is important to 

select a method by which safety can be secured. 
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INDUSTRIAL APPLICABILITY 

An example in which the RPG is built in the 
body of the electronic lock is explained above. This 
5 invention, however, is not limited to such a 

configuration and applicable to an IC tag, or the 
like. The RPG can be incorporated in the body, the 
partner side^ or both the body and the partner side. 
Also, the communication procedures and the 
10 authentication procedures between the key body and 
the partner side can of course be changed in 
accordance ' with the arrangement of the RPG, the 
memory and the communication/authentication control 
units . 



